This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(208, 9%, 30%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ES%3C/text%3E%3C/svg%3E)
Hello, I would like some advice on moving away from the legacy LAPS solution to the now natively supported one that comes bundled with Microsoft Entra. Entra seems to be the way forward and it looks a lot simpler but like anything we would like to test before we transition and have both running side-by-side before we eventually cut the legacy LAPS.
I can't find an official document from Microsoft on how to best achieve this but would be good if someone else with experience can help us with this migration.
Also the LAPS solution we have built is the scripted one that we set up a simple remediation script in Intune to rotate the device administrator password.
https://www.lieben.nu/liebensraum/2021/06/lightweight-laps-solution-for-intune-mde/
Thanks so much in advance and hope that this does not sound too complicated. Regards, Shaun
Also the LAPS solution we have built is the scripted one that we set up a simple remediation script in Intune to rotate the device administrator password. Similar to https://www.lieben.nu/liebensraum/2021/06/lightweight-laps-solution-for-intune-mde/
Thats correct, Windows LAPS solution via Entra / Intune is the best way forward. I have Implemented it in my multiple organizations and since now its in use and helps us rotate local admin passwords automatically. No need for any scripts, its natively deployed via Intune. I have created a Step-by-step deployment guide on Windows LAPS impementation if it helps: https://cloudinfra.net/implement-laps-with-intune-a-comprehensive-guide/
Hi Jatin I have read your step-by-step and it looks good but it does not mention what the steps are if we wish to go from LAPS script to LAPS Intune. Do you mind updating the guide or answering on here how we can go from one system to another and test as we go?
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(233.6, 30%, 32%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ECM%3C/text%3E%3C/svg%3E)
@Shaun Slater, Hope things are going well. I am writing to see if the suggestion provide by JatinMakhija can help. If the answer is helpful, please click "Accept Answer". Thanks!
Thanks for the feedback. If it does not meet your requirement. I suggest you can read MS documentation on migration from Legacy laps to Windows LAPS. Here's the direct link for the same. Hope this helps. https://learn.microsoft.com/en-us/windows-server/identity/laps/laps-scenarios-deployment-migration#migration-scenarios-from-legacy-laps-to-windows-laps-on-existing-devices
